CVE-2020-1065: Buffer Overflow
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-1065?
CVE-2020-1065 is a remote code execution vulnerability in the ChakraCore scripting engine that allows an attacker to execute arbitrary code on a targeted system.
What software is affected by CVE-2020-1065?
CVE-2020-1065 affects Microsoft ChakraCore version up to 1.11.19, Microsoft Edge, and certain versions of Microsoft Windows 10 and Windows Server 2019.
What is the severity of CVE-2020-1065?
CVE-2020-1065 has a severity rating of 7.5 (high).
How do I fix CVE-2020-1065?
To fix CVE-2020-1065, update Microsoft ChakraCore to version 1.11.19 or higher, and apply the necessary patches for affected versions of Microsoft Edge, Windows 10, and Windows Server 2019.
Where can I find more information about CVE-2020-1065?
You can find more information about CVE-2020-1065 on the NIST National Vulnerability Database (NVD), Microsoft Security Guidance Advisory, and the ChakraCore GitHub repository.